According to Microsoft, researchers who identify and report moderate severity vulnerabilities will now be eligible for bounty rewards up to $5,000.